(Senior OR Staff) Detection & Response Engineer

What you'll do

• Hunt, investigate, contain, and resolve security incidents; improve detections and controls based on findings.
• Build, test, deploy, and measure production detections, and map coverage to MITRE ATT&CK.
• Develop AI-system threat models, telemetry, playbooks, and supervised agents for security triage and investigation.

What they ask for

• 5+ years in detection engineering, incident response, or security operations, including senior escalation work; for Staff, roughly 10+ years and experience setting detection and response strategy.
• Strong Python and SQL software engineering skills.
• Use LLMs and agents in day-to-day security work and understand which decisions require human judgment.
• Fluency across endpoint, identity, cloud, and SaaS telemetry.

Nice to have

• Experience with a modern SIEM or security data lake and at least two relevant query or rule languages.
• Experience securing AI systems and agent tool use, or in response automation, incident management, digital forensics, malware analysis, threat intelligence, insider risk, or DLP.

Pay

$187,000 – $328,888 (base salary)

Tools

Python, SQL, MITRE ATT&CK, SPL, KQL, YARA-L, Sigma

AI focus

Build threat models, telemetry, and response playbooks for AI systems and agents; detect agent misuse; supervise agents for triage, enrichment, and investigation; use LLMs and agents in security work.